← CVE Intelligence

CVE-2018-15633

Odoo / Odoo Community PUBLISHED

Description (CNA)

Cross-site scripting (XSS) issue in "document" module in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim via crafted attachment filenames.

Affected (CNA)

Vendor / productVersions
Odoo / Odoo Communityaffected unspecified through 11.0
Odoo / Odoo Enterpriseaffected unspecified through 11.0

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.